WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The WP Data Access plugin for WordPress, which is used to build tables, forms, dashboards, charts, and maps, is affected. An unauthenticated attacker can retrieve the full contents of database tables behind apps published with anonymous REST access, including WordPress user password hashes, email addresses, and password-reset keys.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.88 via the 'rel_tab' parameter. This makes it possible for unauthenticated attackers to extract every row and column of the underlying database table backing any anonymously published app, including WordPress user password hashes, email addresses, and password-reset keys from wp_users. Exploitation requires that an administrator has published at least one app with its REST API authorization set to 'anonymous', which is the standard configuration for publicly embedded apps.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- peterschulznl WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps
through 5.5.88
References 7
plugins.trac.wordpress.org
- browser/wp-data-access/tags/5.5.87/WPDataAccess/API/WPDA_Apps.php#L1040
- browser/wp-data-access/tags/5.5.87/WPDataAccess/API/WPDA_Apps.php#L1060
- browser/wp-data-access/tags/5.5.87/WPDataAccess/API/WPDA_Apps.php#L1156
- browser/wp-data-access/tags/5.5.87/WPDataAccess/API/WPDA_Apps.php#L308
- browser/wp-data-access/tags/5.5.87/WPDataAccess/API/WPDA_Apps.php#L2636
- changeset?reponame=&new=3758843%40wp-data-access%2Ftags%2F5.5.89&old=3744640%40wp-data-access%2Ftags%2F5.5.88